> How ABOUT YOU Commerce Suite (SCAYLE) handles cookies, consent and data under GDPR and ePrivacy. EU hosting, legal basis, DPIA notes and a sample consent text. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/about-you-commerce-suite E-commerce # ABOUT YOU Commerce Suite Preferences · [Official website](https://commercesuite.aboutyou.com) Headless enterprise commerce platform operated by ABOUT YOU / SCAYLE (Hamburg, Germany), used by mid to large fashion and lifestyle retailers to run storefronts, checkout, customer accounts and product search. [Block ABOUT YOU Commerce Suite until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Preferences - Prior consent Required - Documented cookies 6 - Third-party domains 5 - Servers European Union (Germany, Hamburg / Frankfurt AWS regions) Overview ## What does ABOUT YOU Commerce Suite do? ## **What is ABOUT YOU Commerce Suite** ABOUT YOU Commerce Suite, today better known under the SCAYLE brand, is a headless enterprise e commerce platform built and operated by ABOUT YOU SE & Co. KGaA in Hamburg, Germany. It powers storefronts, product catalogues, search, cart, checkout, customer accounts and order management for mid market and enterprise fashion and lifestyle retailers, mostly in the European Union. ## **What data and cookies it handles** As a commerce backbone the platform processes identification data (account, email, billing and shipping address), transactional data (orders, returns, payments), session data (cart, login state, CSRF tokens) and, when activated, behavioural and recommendation data. It sets first party cookies on the merchant domain for session, cart and authentication. Marketing, personalisation or analytics modules can add additional cookies that fall under ePrivacy consent rules. ## **GDPR and ePrivacy implications** Strictly necessary cookies (session, cart, security) can be relied on under Article 5(3) of the ePrivacy Directive without prior consent. Any cookie or tracker used for personalisation, marketing, audience analytics or A B testing is non essential and requires prior, informed and freely given consent. The merchant remains the controller of customer data, while ABOUT YOU / SCAYLE acts as processor under a Data Processing Agreement. ## **Consent requirements** You do not need consent to operate the shop, but you must block recommendation, personalisation and analytics modules until the visitor has given a positive opt in via a compliant consent banner. The banner must list ABOUT YOU / SCAYLE and its non essential cookies, allow rejection as easily as acceptance and store proof of consent. ## **Data transfers and hosting** The core platform is hosted in EU AWS regions (mainly Frankfurt). Customer support, monitoring and connected third parties such as Stripe, PayPal, Klarna, e mail providers or analytics vendors may operate from outside the EU; those transfers must be covered by Standard Contractual Clauses, the EU US Data Privacy Framework or equivalent safeguards in the DPA. ## **Practical compliance checklist** Sign a DPA with ABOUT YOU / SCAYLE, list the suite in your record of processing activities (ROPA) and privacy notice, deploy a consent banner that blocks optional modules by default, document retention periods for orders and abandoned carts, restrict employee access through role based permissions in the admin and run a DPIA if you add behavioural analytics, AI personalisation or large scale customer profiling. Compliance ## ABOUT YOU Commerce Suite and the GDPR ABOUT YOU Commerce Suite is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Article 6(1)(b) GDPR (contract performance) for transactional cookies and checkout; Article 6(1)(a) GDPR (consent) for marketing, personalisation and analytics modules. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, German TTDSG, French CNIL guidelines, Spanish LSSI ### Impact assessment (DPIA) A DPIA is generally not mandatory for a standard headless storefront, but is recommended when the suite is combined with behavioural analytics, AI personalisation, profiling of customers across sessions or large scale processing of payment, address and order history data. ### Sample text for your banner > We use the ABOUT YOU Commerce Suite (SCAYLE) to operate this online shop. Strictly necessary cookies enable cart, checkout and account features. With your consent we also use product recommendations, personalisation and analytics that may set additional cookies and process your interactions for marketing purposes. Cookies and trackers ## What ABOUT YOU Commerce Suite sets and contacts - Tracking method First-party session cookies, server-side processing, optional analytics integration - Server location European Union (Germany, Hamburg / Frankfurt AWS regions) ### Cookies set (6) | Name | Type | Duration | Purpose | | ----------------- | ---- | -------- | --------------------------------------------------------------------------------------- | | aboutyou\_session | http | Session | Identifies the user session, keeps the cart and the login state. | | aboutyou\_cart | http | 30 days | Persists the cart ID across visits. | | csrftoken | http | Session | CSRF protection for forms and checkout actions. | | aboutyou\_locale | http | 1 year | Stores the user language and country preference. | | aboutyou\_ab | http | 90 days | Stores the A/B test variant assigned to the user, requires consent. | | scayle\_reco | http | 6 months | Used by the recommendation engine to personalise product suggestions, requires consent. | ### Third-party domains contacted (5) - `scayle.cloud` - `scayle.com` - `aboutyou.cloud` - `cdn.aboutstatic.com` - `images.aboutstatic.com` Questions ## Frequently asked questions about ABOUT YOU Commerce Suite Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does ABOUT YOU Commerce Suite set? The platform sets first party cookies on your shop domain for the session, the cart, the language and CSRF protection. When you enable recommendations, personalisation or A/B testing it adds further cookies that require consent under ePrivacy. ### Do I need user consent to use it? Not for the strictly necessary shop functions (cart, checkout, login, security). Yes for the optional recommendation, personalisation, marketing and analytics modules, which must be blocked by default and only loaded after an explicit opt in. ### What is the legal basis for processing customer data? Article 6(1)(b) GDPR (contract performance) covers orders, payments, account and delivery. Article 6(1)(a) GDPR (consent) covers marketing personalisation, behavioural analytics and recommendation profiling. Article 6(1)(f) (legitimate interest) can cover fraud prevention and IT security. ### Does ABOUT YOU / SCAYLE transfer data outside the EU? The core platform is hosted in EU AWS regions, mainly Frankfurt. Optional integrations (payment, e mail, analytics) or international support staff may transfer data outside the EU; these transfers must be covered by Standard Contractual Clauses, the EU US Data Privacy Framework or equivalent safeguards listed in the DPA. ### Do I need to run a DPIA? A DPIA is not mandatory for a standard headless storefront. It becomes recommended (and sometimes mandatory under Article 35 GDPR) when you combine the suite with behavioural analytics, AI personalisation, large scale customer profiling or processing of sensitive product categories. ### How do I implement it in a GDPR compliant way? Sign the DPA, list the suite in your ROPA and privacy notice, block optional modules until consent is given, restrict admin access by role, set retention periods for orders and abandoned carts, and document every integrated subprocessor (payment, search, recommendations, analytics). ### What are the alternatives? Comparable headless and enterprise commerce platforms include commercetools, Shopify Plus, Adobe Commerce (Magento), Salesforce Commerce Cloud, Spryker, BigCommerce Enterprise and Shopware. Each has its own data residency, hosting and consent profile that must be evaluated separately. ### How do I update the cookie policy? Run a cookie scan of your live shop, identify every cookie set by the suite and its optional modules, document the purpose, duration and legal basis for each, list ABOUT YOU / SCAYLE as a processor in the privacy notice and refresh both the cookie banner categories and the policy text any time you enable a new module. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [PriceSpider](https://www.flowconsent.com/en/services/ecommerce/pricespider) [PriceSpider is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. PriceSpider supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, PriceSpider enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/ecommerce/pricespider) [Analytics](https://www.flowconsent.com/en/services/ecommerce/pricespider) · ### [Momice](https://www.flowconsent.com/en/services/ecommerce/momice) [Momice is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Momice integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Momice helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/momice) [Preferences](https://www.flowconsent.com/en/services/ecommerce/momice) · ### [Weezbe](https://www.flowconsent.com/en/services/ecommerce/weezbe) [Weezbe is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Weezbe integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Weezbe helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/weezbe) [Preferences](https://www.flowconsent.com/en/services/ecommerce/weezbe) · ### [Bold Commerce](https://www.flowconsent.com/en/services/ecommerce/bold-commerce) [Bold Commerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Bold Commerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.](https://www.flowconsent.com/en/services/ecommerce/bold-commerce) [Preferences](https://www.flowconsent.com/en/services/ecommerce/bold-commerce) · ### [mirrAR](https://www.flowconsent.com/en/services/ecommerce/mirrar) [mirrAR is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. mirrAR enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, mirrAR empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/ecommerce/mirrar) [Preferences](https://www.flowconsent.com/en/services/ecommerce/mirrar) · ### [Unipag](https://www.flowconsent.com/en/services/ecommerce/unipag) [Unipag is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Unipag provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Unipag helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/ecommerce/unipag) [Essential](https://www.flowconsent.com/en/services/ecommerce/unipag) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)